What Changed

Fixed ARM template deployment failure in the RFI-confirm-EntraID-risky-user playbook by removing stale references to the deleted Check_if_AD_Identity_Protection_risky_users_list_contains_the_user action.

Security Impact

The affected playbook was completely non-deployable since v1.2 due to ARM template validation failures. Deployments attempting to install this playbook from the v3.0 folder experienced InvalidTemplate errors at deploy time, preventing installation of identity protection automation.

Per PR discussion: The deleted action references remained in both response actions after the action was removed in v1.2, causing template validation to fail when referencing non-existent workflow steps.

This fix restores the playbook deployability for organizations using Recorded Future Identity Intelligence to automate Entra ID risky user confirmation workflows.

Affected Files

Solutions/Recorded Future Identity/Playbooks/v3.0/RFI-confirm-EntraID-risky-user/azuredeploy.json